StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
prowlarrpree-helm-chartsVerified publisher1.60.01 of 1See more

prowlarr pree-helm-charts 1.60.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.6.5.56236152751c3ea2
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

221
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
brotli@1.0.9-2build6
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
brotli@1.0.9-2build6
no fix listed

Open the chart page →

17,553
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,009
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.3.12 of 3See more

tbmq-cluster tbmq-helm-chart 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.16a0e157c73be
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
thingsboard/tbmq-node:2.4.155aa86b6144f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,084
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,810
elasticsearch-clusterwiremindVerified publisher4.5.41 of 2See more

elasticsearch-cluster wiremind 4.5.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.22909a569c9c97
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,118
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,804
zigbee2mqttzigbee2mqtt2.14.21 of 2See more

zigbee2mqtt zigbee2mqtt 2.14.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.2addbfb08fcef
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,722
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
brotli@1.0.7-6ubuntu0.1
no fix listed
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
brotli@1.0.7-6ubuntu0.1
no fix listed
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

32,654
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheda3c72f9886f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,810
sonarralekcVerified publisher1.9.11 of 1See more

sonarr alekc 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/hotio/sonarr:release-4.0.20.3014afc94d6134d3
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

181
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

4,398
crowdatlassian-data-centerVerified publisher2.0.181 of 2See more

crowd atlassian-data-center 2.0.18

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.43e1e1aa08071
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,553
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

61,186
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,382
cortexcortex3.5.01 of 4See more

cortex cortex 3.5.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.314c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,156
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,667
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

563
grayloggraylog2OfficialVerified publisher2.1.01 of 2See more

graylog graylog2 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,117
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,474
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,969
piholehelmforgeVerified publisher2.1.21 of 1See more

pihole helmforge 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pihole/pihole:2026.10.0d34134716fc3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

105
wordpresshelmforgeVerified publisher3.0.121 of 3See more

wordpress helmforge 3.0.12

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:7.1.3-apache81a34254acaa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,959
janssenjanssen-auth-serverOfficialVerified publisher0.0.0-nightly8 of 8See more

janssen janssen-auth-server 0.0.0-nightly

8 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/persistence-loader:0.0.0-nightlyb88405f8235a
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

161
jellyfinloeken-at-homeVerified publisher10.11.81 of 1See more

jellyfin loeken-at-home 10.11.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,215
mercuremercureOfficialVerified publisher1.1.41 of 1See more

mercure mercure 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dunglas/mercure:v1.1.4ed2c3959516e
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

32
meshery-operatormesheryOfficialVerified publisher1.0.741 of 2See more

meshery-operator meshery 1.0.74

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,579
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

9,264
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge9b13f0b831ab
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,245
cyberchefobeoneVerified publisher2.0.51 of 1See more

cyberchef obeone 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obeoneorg/cyberchef:v11.5.01290632ca8b9
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

118
technitium-dnsserverobeoneVerified publisher1.13.51 of 1See more

technitium-dnsserver obeone 1.13.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
technitium/dns-server:15.6.2eb48ac5c135f
brotli@1.1.0-2build2
no fix listed

Open the chart page →

600
opencostopencost-ociOfficialVerified publisher2.5.331 of 2See more

opencost opencost-oci 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-ui:1.121.399ee2db766a0
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

580
passboltpassbolt2.2.11 of 6See more

passbolt passbolt 2.2.1

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
passbolt/passbolt:5.17.0-1-cecced3dab8de3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

13,934
reposilitereposilite1.4.21 of 1See more

reposilite reposilite 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,380
selenium-gridselenium-grid0.62.13 of 4See more

selenium-grid selenium-grid 0.62.1

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
selenium/hub:4.51.0-202610104f94ce0ca99c
brotli@1.1.0-2build2
no fix listed
selenium/node-chrome:4.51.0-20261010b3f54a14452e
brotli@1.1.0-2build2
no fix listed
selenium/node-firefox:4.51.0-20261010e6a109a147cd
brotli@1.1.0-2build2
no fix listed

Open the chart page →

9,001
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestcf8f0ab2ebe6
brotli@1.0.9-2build6
no fix listed

Open the chart page →

2,978
thehivestrangebee-helmOfficialVerified publisher2.0.03 of 7See more

thehive strangebee-helm 2.0.0

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
strangebee/thehive:6.0.0-14f6db02bb2b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

69,077
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

95,858
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,796
docusealzekker6Verified publisher1.136.01 of 1See more

docuseal zekker6 1.136.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
docuseal/docuseal:3.3.328d0ca583860
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

150
abcdesktopabcdesktopOfficialVerified publisher4.4.135 of 9See more

abcdesktop abcdesktop 4.4.13

5 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/keysgenerator:4.4bb965d179044
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/abcdesktopio/mongo:safe8.061ffacc6ba8c
brotli@1.1.0-2build2
no fix listed
ghcr.io/abcdesktopio/oc.speedtest:4.42a6731a8cebe
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/abcdesktopio/pyos:4.4.alpine_lateste37a5af50a04
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/abcdesktopio/route:4.4e4435a3ab2eb
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,326
agonesagones1.61.01 of 5See more

agones agones 1.61.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,551
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stableeb1c896deef8
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,202
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
brotli@1.2.0-3build1
no fix listed

Open the chart page →

52,236
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,538
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest921b38fb12d2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,370
bambooatlassian-data-centerVerified publisher2.0.181 of 2See more

bamboo atlassian-data-center 2.0.18

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.122009b0c8591a
brotli@1.1.0-2build2
no fix listed

Open the chart page →

26,156
axelixaxelixVerified publisher1.2.11 of 1See more

axelix axelix 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/axelixlabs/axelix:1.2.1cc5219b39779
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
baserowbaserow-chartVerified publisher1.1.12 of 6See more

baserow baserow-chart 1.1.1

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
baserow/backend:2.4.1497347d0ba74
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

20,099
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
brotli@1.0.7-6ubuntu0.1
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

139,905

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/install-cni:1.23.6ab34c4740f44
brotli@1.1.0-2build2
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
brotli@1.1.0-2build2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.0325156535773
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.23.69c3d6a218181
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.17.1ce9d87606701
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.15.2db08d6963975
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
brotli@1.1.0-2build2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
brotli@1.1.0-2build2
no fix listed
1
itzg/bungeecord:latest2a77bff989e1
brotli@1.2.0-3build1
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
brotli@1.1.0-2build2
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed
1
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
brotli@1.1.0-r2
1.1.1-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
brotli@1.1.0-r2
1.1.1-r0
1
jedi132000/nextapp:latestdc2a81e92f23
brotli@1.0.7-6ubuntu0.1
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:12.32038fe038ab3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.6333b64771663
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:12.2:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.77ae36aab93ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.696b09723b22f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jesec/flood:4.14.3c887dad96b40
brotli@1.2.0-r1
1.2.1-r0
1
jhipster/jhipster-registry:latest7184525acd4d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
1
jhonbrownn/merge-pilot-frontend:1.6.09ae41ca173c7
brotli@1.2.0-r0
1.2.1-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jitesoft/kubectl:latest8e4ceaa6d7db
brotli@1.2.0-r1
1.2.1-r0
1
jlesage/firefox:v25.03.1055c28defe31
brotli@1.1.0-r2
1.1.1-r0
1
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.